Data Privacy Statement

1) Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how your personal data is handled when you use our website and all subdomains belonging to the domains at https://rheininsights.de/, https://rheininsights.com/, https://rhineinsights.de/, https://rhineinsights.com/, https://rheinsights.de/ and https://rheinsights.com/.

1.2 Personal data is all data with which you can be personally identified.

1.3         Responsible for data processing on this website within the meaning of the Datenschutz-Grundverordnung (DSGVO) is:

RheinInsights GmbH
Breite Straße 3
40213 Düsseldorf
Germany

Phone: +49 211 158 16 900
Mail: info@rheininsights.com

Responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.4         This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. requests to the person responsible). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

2)           Data collection when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

·         The visited page

·         Date and time of the access

·         Amount of transmitted data in bytes

·         A reference from which page you came to this page

·         The browser used

·         The operation system used

·         IP-address used (if applicable.: anonymized)

The processing is carried out in accordance with Art. 6 (1) (f) DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3)           Hosting

External hosting via Strato

External hosting by Strato

This website is hosted by an external service provider (hoster). The hoster is Strato AG (hereinafter referred to as "Strato"), Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We use the Hosting Plus package from Strato. Personal data collected on this website is stored on Strato's servers. This can include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

Strato is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f DSGVO).

Strato will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data. Further processing on servers other than those mentioned above by Strato only takes place within the framework stated below.

In order to ensure that processing complies with data protection regulations, we have concluded a contract for order processing with Strato. You can find more information on how user data is handled in Strato's privacy policy: https://www.strato.de/datenschutz/.

4)           Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. You can find out how long each cookie is stored for in the overview of the cookie settings in your web browser.

If personal data is also processed by individual cookies used by us, the processing takes place in accordance with Art. 6 Para. 1 lit. b DSGVO either to execute the contract, in accordance with Art. 6 Para. 1 lit. a DSGVO in the event of consent being granted, or in accordance with Art. 6 Para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5)           Contact

When you contact us (e.g. via contact form or email), personal data is collected. The data collected when you use a contact form can be seen from the respective contact form. This data is stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Paragraph 1 Letter f DSGVO. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Paragraph 1 Letter b DSGVO. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

6)           Use of social media: videos

Usage of Youtube-Videos

Under the domains specified in point 1.1, we may use the YouTube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This uses the extended data protection mode, which, according to the provider, only starts saving user information when the video(s) is played. When embedded YouTube videos are started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube", these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not want to be assigned to your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 (1) (f) DSGVO on the basis of Google's legitimate interests in displaying personalized advertising, market research and/or designing its website to meet needs. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to Google LLC's servers in the USA.

Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which can trigger further data processing operations without our influence.

Further information on data protection at "Youtube" can be found in the YouTube terms of use at https://www.youtube.com/static?template=terms and in Google's privacy policy at https://www.google.de/intl/de/policies/privacy.

To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) DSGVO for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.

7)        Tools

8)        Rights of the data subject

8.1. The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:

· Right to information in accordance with Art. 15 DSGVO: In particular, you have a right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of which guarantees exist in accordance with Art. 46 DSGVO when your data is forwarded to third countries;

· Right to rectification in accordance with Art. 16 DSGVO: You have the right to have incorrect data concerning you rectified immediately and/or to have incomplete data stored by us completed;

· Right to erasure in accordance with Art. 17 DSGVO: You have the right to request the erasure of your personal data if the requirements of Art. 17 Para. 1 DSGVO are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

· Right to restriction of processing in accordance with Art. 18 DSGVO: You have the right to request restriction of processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request restriction of processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;

· Right to information in accordance with Art. 19 DSGVO: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the responsible party, this party is obliged to inform all recipients to whom the personal data concerning you was disclosed of said rectification or erasure of the data or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure. You have the right to be informed of these recipients.

· Right to data portability in accordance with Art. 20 DSGVO: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party, insofar as this is technically feasible;

· Right to revoke consent granted in accordance with Art. 7 Para. 3 DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation;

Right to lodge a complaint pursuant to Art. 77 DSGVO: If you consider that the processing of personal data concerning you violates the DSGVO, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

8.2      RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO CARRY OUT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9)        Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and - if applicable - also by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of an express consent in accordance with Art. 6 Para. 1 lit. a DSGVO, this data is stored until the data subject revokes his or her consent.

If statutory retention periods exist for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b DSGVO, this data is routinely deleted after the retention periods have expired, provided that it is no longer required to fulfill or initiate a contract and/or we have no legitimate interest in continuing to store it.

When processing personal data on the basis of Art. 6 (1) (f) DSGVO, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 (1) (f) DSGVO, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) DSGVO.

Unless the other information in this declaration on specific processing situations indicates otherwise, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Status: June 15, 2024